Urban Push Security & Risk Analysis

wordpress.org/plugins/urban-push

A plugin that uses the Urban Airship API to send a push notification from the post creation page.

10 active installs v1.0.5 PHP + WP 2.0.2+ Updated Dec 27, 2013
pushpush-notificationsurban-airship
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Urban Push Safe to Use in 2026?

Generally Safe

Score 85/100

Urban Push has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12yr ago
Risk Assessment

Based on the static analysis, the "urban-push" v1.0.5 plugin exhibits a strong security posture. The absence of any identified dangerous functions, raw SQL queries, unescaped output, file operations, or unsanitized taint flows suggests that the core code is well-written and adheres to secure coding practices. The plugin also correctly utilizes prepared statements for its SQL queries, a crucial measure for preventing SQL injection vulnerabilities. Furthermore, the plugin makes only one external HTTP request, which, while not inherently a vulnerability, should be monitored for potential misconfigurations or reliance on untrusted endpoints.

Key Concerns

  • Single external HTTP request
Vulnerabilities
None known

Urban Push Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Urban Push Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0
Attack Surface

Urban Push Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionadmin_initsettings.php:152
actionadmin_menusettings.php:153
actionadmin_initurbanpush.php:12
actionsave_posturbanpush.php:13
Maintenance & Trust

Urban Push Maintenance & Trust

Maintenance Signals

WordPress version tested3.7.41
Last updatedDec 27, 2013
PHP min version
Downloads2K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Urban Push Developer Profile

Sonny Parlin

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Urban Push

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Data Attributes
name="push"name="password"id="push_sectionid"name="push_noncename"
Shortcode Output
<textarea name="push" value="" style="width:100%"/></textarea>Enter Password:<input type="password" name="password" style="width:100%"/>
FAQ

Frequently Asked Questions about Urban Push